Is Mo'Kick - Better Kick For Everyone safe?

Mo'Kick fetches unversioned CSS from a GitHub Gist on every kick.com page load without integrity verification.

Each time a kick.com page loads, the extension retrieves a stylesheet from GitHub Gist using a tip-of-tree URL that always reflects the latest revision of the gist. The returned CSS is injected directly into the page without any checksum or Subresource Integrity check, meaning whoever controls that gist can change what is injected into kick.com pages for all users.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.